CVE-2024-21126

Summary

CVE-2024-21126 is a vulnerability affecting the Oracle Database Portable Clusterware component of Oracle Database Server. Versions 19.3-19.23 and 21.3-21.14 are vulnerable to this easily exploitable issue. An unauthenticated attacker with network access via DNS can exploit this flaw, potentially compromising Oracle Database Portable Clusterware. This vulnerability may also significantly impact other products (scope change). Successful attacks can lead to a partial denial of service (partial DOS) of Oracle Database Portable Clusterware, with a CVSS 3.1 Base Score of 5.8 for availability impacts. The CVSS Vector is (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L).

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.